Skip to content
OpenAdvisories

Vendor

h2o

22 known vulnerabilities.

Products

h2o 13 quicly 6 picotls 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2021-43848 Public exploit

    Unititialized memory access in h2o

    h2o is an open source http server. In code prior to the `8c0eca3` commit h2o may attempt to access uninitialized memory. When receiving QUIC frames in certain order, HTTP/3 server-side implementation of h2o can be misguided to treat uninitialized memory as HT…

    h2o h2o h2o Ubuntu